$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json) Hash identifier: ysJgC2FuK8fyRQFVvkprkFwhiLxI82kLSdCxuAgpoZM= Subject key identifier: 1A:EE:06:C1:DC:FF:BD:1D:4F:C9:07:45:01:6D:AC:CF:4E:02:B0:A0 Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Certificate serial: 0E51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft Manifest number: 0E47 Signing time: Sat 18 Oct 2025 18:25:07 +0000 Manifest this update: Sat 18 Oct 2025 18:25:06 +0000 Manifest next update: Sat 25 Oct 2025 18:25:06 +0000 Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: /9Gx39d9Zp1wf2so4SLCSixw4+TvF8NHesovW9PulWA=) 2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: 6nYEOZbY+riA9hipBBLAA8A7cOGQEYjhf5EbPaoNkaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3665 (0xe51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Validity Not Before: Oct 18 18:25:06 2025 GMT Not After : Oct 25 18:25:06 2025 GMT Subject: CN=68f3db82-921a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:fb:00:e4:2c:98:e1:17:a1:f3:3a:f9:52: a5:80:ce:e0:f1:07:24:bf:61:a6:58:ce:e9:4b:3c: 06:2a:00:51:75:61:db:bc:71:12:36:e0:d2:a3:b9: 63:47:20:31:a9:b3:f3:5a:45:c2:7b:a4:92:a3:0d: 9d:97:79:15:33:d2:ca:a0:c9:26:4f:6a:f4:cf:d5: 36:d7:56:66:ea:e4:de:33:58:50:28:bc:8c:0a:91: b9:e4:56:9d:d6:05:4f:29:47:3f:30:3e:e4:2c:e9: 85:c7:5f:5f:61:90:ef:22:58:54:db:61:3e:ab:29: bd:d1:ac:39:a2:43:37:b0:6a:2f:41:dc:da:88:f2: a3:93:bb:5d:ca:f0:70:27:7d:96:ec:47:a3:bd:7c: 56:4b:b2:95:16:b0:f0:cc:77:73:24:c4:5f:90:14: ea:91:32:6f:6a:12:be:2d:e6:b3:33:57:4c:e5:35: 86:78:e3:21:11:d2:6e:0f:a5:ed:d6:cc:a4:d5:92: 63:fb:7c:63:90:77:ca:d3:80:3d:c5:6a:be:88:cd: 3c:5d:0d:f5:0f:11:02:09:3b:5a:ab:f7:80:0c:10: d8:72:1c:d2:63:d6:31:92:57:f8:e1:1b:0d:1d:a1: 1a:cf:af:52:0c:ce:59:14:fe:52:bf:6e:91:d8:44: bb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EE:06:C1:DC:FF:BD:1D:4F:C9:07:45:01:6D:AC:CF:4E:02:B0:A0 X509v3 Authority Key Identifier: keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:32:66:d4:46:e4:24:fc:4f:24:3f:e2:ec:93:48:a9:5d:fd: 1a:65:88:0f:a8:a4:c7:18:50:90:f6:15:d8:90:f4:8e:f8:db: b4:48:f5:a6:92:56:7d:51:d1:5b:76:0b:19:ca:c9:aa:bb:cd: 8b:83:12:8d:26:a8:66:f4:a0:c3:ad:39:19:31:4e:01:67:bf: c9:f8:86:45:f0:18:d1:36:35:39:de:5a:5c:ce:d1:9d:a5:0b: d1:b0:99:8f:fc:56:d2:c6:2c:49:88:1c:47:af:44:7d:76:b4: a2:e2:88:7a:49:0a:cb:99:50:84:98:62:a2:05:e2:ae:ff:0a: eb:99:4c:ee:09:f2:2b:fa:82:b5:80:cb:b2:df:c8:25:52:de: b8:12:b1:d3:29:a1:5c:a7:fe:2d:05:f4:2a:fc:5b:6d:11:b4: f7:8e:1b:6e:db:da:40:28:77:c7:c6:07:61:fb:d4:c4:07:29: ec:fc:4b:c7:e2:7d:e5:d7:20:4a:71:6a:79:2d:88:8d:da:8d: ee:03:95:f3:8b:7e:43:90:56:27:b4:38:d7:15:81:bc:35:af: 99:27:97:33:d3:bd:3b:02:5d:1a:ea:46:e7:f6:19:b0:a0:fc: 6e:cf:1f:95:a6:7c:cb:bb:de:9b:43:a9:41:fd:ff:f1:e9:97: 15:28:7d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz RTU3OUZDOUQwHhcNMjUxMDE4MTgyNTA2WhcNMjUxMDI1MTgyNTA2WjAYMRYwFAYD VQQDEw02OGYzZGI4Mi05MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwv7AOQsmOEXofM6+VKlgM7g8Qckv2GmWM7pSzwGKgBRdWHbvHESNuDSo7lj RyAxqbPzWkXCe6SSow2dl3kVM9LKoMkmT2r0z9U211Zm6uTeM1hQKLyMCpG55Fad 1gVPKUc/MD7kLOmFx19fYZDvIlhU22E+qym90aw5okM3sGovQdzaiPKjk7tdyvBw J32W7EejvXxWS7KVFrDwzHdzJMRfkBTqkTJvahK+LeazM1dM5TWGeOMhEdJuD6Xt 1syk1ZJj+3xjkHfK04A9xWq+iM08XQ31DxECCTtaq/eADBDYchzSY9Yxklf44RsN HaEaz69SDM5ZFP5Sv26R2ES71QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBruBsHc /70dT8kHRQFtrM9OArCgMB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX alR6bXdKOGV1VTAtVjVfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARMmbURuQk/E8kP+Lsk0ipXf0aZYgPqKTHGFCQ9hXYkPSO+Nu0SPWm klZ9UdFbdgsZysmqu82LgxKNJqhm9KDDrTkZMU4BZ7/J+IZF8BjRNjU53lpcztGd pQvRsJmP/FbSxixJiBxHr0R9drSi4oh6SQrLmVCEmGKiBeKu/wrrmUzuCfIr+oK1 gMuy38glUt64ErHTKaFcp/4tBfQq/FttEbT3jhtu29pAKHfHxgdh+9TEByns/EvH 4n3l1yBKcWp5LYiN2o3uA5Xzi35DkFYntDjXFYG8Na+ZJ5cz0707Al0a6kbn9hmw oPxuzx+VpnzLu96bQ6lB/f/x6ZcVKH0c -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:12 2025 by rpki-client